Polymarket, a leading cryptocurrency prediction market, is taking significant steps to compensate users following a recent security breach. The company announced it will reimburse a total of $3.9 million to those affected by the hack that occurred last week. This sum includes $2.7 million to cover initial losses and an additional $1.2 million for losses incurred during the platform's temporary shutdown.

In a detailed post-mortem of the incident, Polymarket explained that no claims or tickets are necessary for reimbursement. Eligible wallets have already been identified using on-chain and trading data, and as of Saturday, 95 percent of these wallets had been refunded in full. The breach was traced back to an issue with DebugBear, a provider of website performance services, whose compromised script was replaced with one designed to drain user wallets.

Cybersecurity firm Hudson Rock highlighted the presence of "wallet-draining code" in the compromised script, which was intended to discover accounts, select assets, and transfer funds illicitly. Polymarket confirmed this finding and took immediate steps by removing the compromised script, pausing trading, and resetting login sessions. The company also redeployed the script with enhanced integrity controls and continuous monitoring to prevent future incidents.

Polymarket has contacted law enforcement and is conducting an internal investigation to identify the threat actor. Meanwhile, DebugBear issued a statement acknowledging the compromise through its domain registrar and is actively investigating the incident. They assured that there is no evidence of a compromise in their internal systems so far, but they continue to probe further.

This incident underscores the importance of robust cybersecurity measures in safeguarding digital platforms, especially those dealing with cryptocurrency transactions.